$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.cer File: D19ACB3B0FCAE804AD6F349C25F29C346A335251.cer (raw, json) Hash identifier: WglgU95zM7772KbAbMUKoNwS2tXOhTfaHD9JWcIOUp0= Subject key identifier: D1:9A:CB:3B:0F:CA:E8:04:AD:6F:34:9C:25:F2:9C:34:6A:33:52:51 Authority key identifier: F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 Certificate issuer: /CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Certificate serial: 373B2D187A7363866A91B32A38606ED32DEE73A4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 28 Jan 2026 13:24:45 +0000 Certificate not after: Wed 27 Jan 2027 13:29:45 +0000 Subordinate resources: AS: 272907 IP: 2803:f690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 07 Mar 2026 04:33:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3b:2d:18:7a:73:63:86:6a:91:b3:2a:38:60:6e:d3:2d:ee:73:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678 Validity Not Before: Jan 28 13:24:45 2026 GMT Not After : Jan 27 13:29:45 2027 GMT Subject: CN=D19ACB3B0FCAE804AD6F349C25F29C346A335251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:46:78:09:a8:71:8a:40:28:96:6a:25:4b:f8: dc:c6:a7:72:62:6b:ed:92:b6:02:c5:6e:cb:6c:6a: 53:08:be:ac:ee:fd:59:51:55:72:3a:f9:3c:8c:43: f8:21:44:c6:e9:da:a5:ec:54:71:43:76:60:7b:24: 15:44:ee:f8:69:4c:49:99:f6:47:32:1e:8d:e8:df: d9:3d:a7:82:76:38:4f:73:a7:3b:f1:e2:4f:dc:e1: 82:f4:8c:d1:b5:17:3c:73:ef:a1:32:f1:d5:7c:0c: 4d:3d:d5:2e:ec:66:51:19:1e:0b:fe:69:09:4b:5e: 19:91:75:d2:31:6e:63:60:75:24:63:67:18:1f:fe: 58:e8:0e:32:5e:2a:ee:9d:c6:13:9c:29:07:37:89: 54:3d:bc:4a:19:eb:c9:9e:1f:2d:3c:f0:50:45:64: d8:9f:9f:3c:57:97:af:cb:2e:b5:9e:32:d1:2c:03: 21:5b:0c:26:c1:b3:fe:09:a4:23:a6:05:58:70:1d: ba:1c:fa:f5:da:7c:3a:42:29:fe:02:b1:95:1d:38: ba:ce:97:18:49:66:21:86:99:fa:2f:92:4b:62:18: f4:07:b0:08:3b:7b:b9:c3:ca:56:e0:76:fc:57:fd: 6d:ca:08:91:51:ed:83:06:01:cd:72:1c:af:ac:29: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:9A:CB:3B:0F:CA:E8:04:AD:6F:34:9C:25:F2:9C:34:6A:33:52:51 X509v3 Authority Key Identifier: keyid:F2:5A:1B:7D:8F:7A:DF:94:C0:DE:BE:8F:EA:C1:C3:BC:D6:05:86:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1F726A421DB5230E7BD6CC6E9641FE904F19310899DF0BADCD09F8E76A262373/0/D19ACB3B0FCAE804AD6F349C25F29C346A335251.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272907 Signature Algorithm: sha256WithRSAEncryption 7f:00:1f:88:89:82:60:91:58:fd:91:35:32:ec:e6:44:fb:9f: 91:c1:5e:57:6a:b4:52:c9:3d:3c:aa:32:7e:21:a3:74:38:e1: 74:b9:63:04:15:9e:a3:34:8d:58:5c:00:d7:30:d8:43:17:46: 1c:b4:16:c0:a1:8e:15:4d:2b:43:dd:ad:9e:f1:e7:3b:19:52: 22:f9:ed:02:40:b2:33:da:27:65:cf:aa:2c:e9:ef:bc:2b:54: 75:f4:8b:28:21:ce:b9:d6:da:e9:ed:ca:65:69:1c:0a:c7:60: af:6e:e3:5f:16:c2:30:a0:e0:04:b0:c3:c3:ee:56:73:54:40: 0e:28:9d:d0:4c:f9:3c:6e:4f:cd:74:c4:d0:04:a2:1f:4b:60: c6:0d:67:98:69:48:33:5c:36:a1:cb:27:d6:a3:20:f7:d6:d3: 53:6c:a2:bb:e5:1f:e6:70:1f:53:94:5d:94:a7:95:c0:ba:80: 1f:46:fc:26:d4:85:22:6d:ba:f5:f3:5b:0f:6c:78:58:cd:85: f6:c4:e4:de:33:91:81:ea:c2:81:e9:be:a9:37:80:2b:bc:74: 59:ab:70:b3:b0:74:2d:6c:aa:72:b2:a6:d7:83:a8:61:a3:23: ad:b6:ee:26:0b:cb:dd:8c:47:0f:45:28:53:e4:71:49:9b:43: 11:ad:dc:e9 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUNzstGHpzY4ZqkbMqOGBu0y3uc6QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI1QTFCN0Q4RjdBREY5NEMwREVCRThGRUFDMUMzQkNE NjA1ODY3ODAeFw0yNjAxMjgxMzI0NDVaFw0yNzAxMjcxMzI5NDVaMDMxMTAvBgNV BAMTKEQxOUFDQjNCMEZDQUU4MDRBRDZGMzQ5QzI1RjI5QzM0NkEzMzUyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRngJqHGKQCiWaiVL+NzGp3Ji a+2StgLFbstsalMIvqzu/VlRVXI6+TyMQ/ghRMbp2qXsVHFDdmB7JBVE7vhpTEmZ 9kcyHo3o39k9p4J2OE9zpzvx4k/c4YL0jNG1Fzxz76Ey8dV8DE091S7sZlEZHgv+ aQlLXhmRddIxbmNgdSRjZxgf/ljoDjJeKu6dxhOcKQc3iVQ9vEoZ68meHy088FBF ZNifnzxXl6/LLrWeMtEsAyFbDCbBs/4JpCOmBVhwHboc+vXafDpCKf4CsZUdOLrO lxhJZiGGmfovkktiGPQHsAg7e7nDylbgdvxX/W3KCJFR7YMGAc1yHK+sKaFFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTRmss7D8roBK1v NJwl8pw0ajNSUTAfBgNVHSMEGDAWgBTyWht9j3rflMDevo/qwcO81gWGeDAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9GMjVBMUI3RDhGN0FERjk0QzBERUJFOEZFQUMxQzNCQ0Q2MDU4Njc4LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0Yy NUExQjdEOEY3QURGOTRDMERFQkU4RkVBQzFDM0JDRDYwNTg2NzguY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMUY3MjZBNDIxREI1MjMwRTdCRDZDQzZF OTY0MUZFOTA0RjE5MzEwODk5REYwQkFEQ0QwOUY4RTc2QTI2MjM3My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xRjcyNkE0MjFEQjUyMzBFN0JENkNDNkU5NjQxRkU5MDRGMTkzMTA4OTlE RjBCQURDRDA5RjhFNzZBMjYyMzczLzAvRDE5QUNCM0IwRkNBRTgwNEFENkYzNDlD MjVGMjlDMzQ2QTMzNTI1MS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAP2kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKgswDQYJKoZIhvcNAQELBQADggEBAH8AH4iJ gmCRWP2RNTLs5kT7n5HBXldqtFLJPTyqMn4ho3Q44XS5YwQVnqM0jVhcANcw2EMX Rhy0FsChjhVNK0PdrZ7x5zsZUiL57QJAsjPaJ2XPqizp77wrVHX0iyghzrnW2unt ymVpHArHYK9u418WwjCg4ASww8PuVnNUQA4ondBM+TxuT810xNAEoh9LYMYNZ5hp SDNcNqHLJ9ajIPfW01NsorvlH+ZwH1OUXZSnlcC6gB9G/CbUhSJtuvXzWw9seFjN hfbE5N4zkYHqwoHpvqk3gCu8dFmrcLOwdC1sqnKypteDqGGjI6227iYLy92MRw9F KFPkcUmbQxGt3Ok= -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:31 2026 by rpki-client